Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/GVq4QmjJBMglpPCesEDR9y4RIzE.mft
File:                     GVq4QmjJBMglpPCesEDR9y4RIzE.mft (raw, json)
Hash identifier:          +LJhyW8w/A6bZrEJqxm7hKaL/btTLWeZYqAlMBBjyww=
Subject key identifier:   DB:61:C4:06:5E:85:F3:65:6F:7C:D5:56:7A:64:1B:83:99:79:42:31
Authority key identifier: 19:5A:B8:42:68:C9:04:C8:25:A4:F0:9E:B0:40:D1:F7:2E:11:23:31
Certificate issuer:       /CN=195ab84268c904c825a4f09eb040d1f72e112331
Certificate serial:       018A4D9C890B55D7CFE477C65A6E21D511C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVq4QmjJBMglpPCesEDR9y4RIzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/GVq4QmjJBMglpPCesEDR9y4RIzE.mft
Manifest number:          060C
Signing time:             Thu 31 Aug 2023 22:00:18 +0000
Manifest this update:     Thu 31 Aug 2023 22:00:18 +0000
Manifest next update:     Fri 01 Sep 2023 22:00:18 +0000
Files and hashes:         1: GVq4QmjJBMglpPCesEDR9y4RIzE.crl (hash: NwVKpUjOdcXO+mdw7+Jm1D5p2H5Uz3uN7WfKFfjwTOU=)
                          2: XtBEg0gvFit4_Fq2n8osyVY6KLs.roa (hash: YEvCa6xmNZrCVe8+GOSbDDsOsZw8ScB6mwEnLTrOjAY=)
                          3: oV8MB49A7-JOqPhYzSfDF9-7mDY.roa (hash: G7VLXoi8q7TO020sOt67cYA7uffIp6Dyu4pB/twfCvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4d:9c:89:0b:55:d7:cf:e4:77:c6:5a:6e:21:d5:11:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195ab84268c904c825a4f09eb040d1f72e112331
        Validity
            Not Before: Aug 31 22:00:18 2023 GMT
            Not After : Sep  1 22:00:18 2023 GMT
        Subject: CN=db61c4065e85f3656f7cd5567a641b8399794231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:31:c2:83:c3:f5:cc:a2:34:b1:9e:23:8c:
                    51:fa:f1:8c:2f:28:c5:2d:0e:48:12:b2:de:50:33:
                    ef:20:92:6b:60:c9:7e:bf:b6:3e:d9:6e:60:35:e9:
                    d9:15:62:75:41:57:54:e1:04:83:52:20:9f:84:59:
                    e9:bd:5d:2b:bb:be:94:16:02:ed:94:7f:f6:6e:4e:
                    e4:e2:9b:70:3c:7e:82:07:bf:87:9f:09:fa:f1:82:
                    aa:fb:ac:4b:72:7a:e6:ac:c3:ed:45:92:9b:e9:19:
                    70:cd:37:93:54:dc:34:b2:57:ac:fe:3b:ad:b3:d3:
                    ef:3b:3a:4e:d8:02:4f:71:51:a0:24:45:a3:e9:ef:
                    e7:72:bf:2c:00:6d:3b:5b:5b:38:e2:26:7f:e6:3c:
                    16:20:d8:e4:86:09:2f:db:3a:b1:5c:ca:44:ba:95:
                    a3:64:02:1e:95:af:6b:9a:f5:0a:86:1b:39:60:dd:
                    ff:af:1a:ed:b8:76:41:37:25:f8:b8:96:c8:61:6c:
                    5c:70:b0:a2:8b:11:48:0d:d8:5a:42:e1:27:26:17:
                    ef:d8:be:80:3a:4c:32:fa:9b:eb:d5:18:ab:1b:ff:
                    fd:52:51:75:fa:08:f8:eb:7c:60:2c:f5:6d:d6:e0:
                    40:20:9d:b2:3c:60:b0:35:c8:dd:6a:b8:1a:7d:a9:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:61:C4:06:5E:85:F3:65:6F:7C:D5:56:7A:64:1B:83:99:79:42:31
            X509v3 Authority Key Identifier:
                keyid:19:5A:B8:42:68:C9:04:C8:25:A4:F0:9E:B0:40:D1:F7:2E:11:23:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVq4QmjJBMglpPCesEDR9y4RIzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/GVq4QmjJBMglpPCesEDR9y4RIzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/GVq4QmjJBMglpPCesEDR9y4RIzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:24:7b:07:f4:fc:05:bc:ff:be:98:53:df:76:e2:f3:76:c4:
         ae:05:70:f9:6e:52:0e:7b:76:36:ee:40:6c:7f:7b:6d:d8:fb:
         cb:66:14:9e:69:a3:3a:fe:e6:b9:92:4f:e9:4e:12:e9:16:b4:
         32:52:db:13:f3:2c:0b:5c:88:54:98:5e:15:70:fd:21:cb:80:
         84:d4:13:f3:78:a6:03:b2:71:e8:ef:7e:33:52:bb:18:88:24:
         81:a3:5b:76:09:e6:50:05:b5:56:3b:21:32:e7:d9:f5:1f:12:
         61:df:23:7c:ff:6b:c7:87:0f:12:0c:8b:fc:81:08:ec:d5:d5:
         8d:6c:e8:cb:aa:5b:1e:8b:eb:80:e3:bf:b1:ed:7f:45:64:c6:
         bc:6f:94:4b:9e:67:3e:f2:1e:67:cd:b1:1e:64:a1:06:7c:a1:
         16:e1:a0:58:1b:d5:fe:34:41:3a:c6:8c:63:32:9f:11:bc:d3:
         73:d6:99:22:25:4e:41:ff:f2:a7:f1:39:2d:f2:5f:31:4c:b6:
         bc:1b:19:a0:8c:b6:1d:68:a1:0e:49:95:01:1c:21:e5:3f:5d:
         40:c5:c7:00:69:83:f8:8f:6b:92:c7:12:33:9a:b7:38:37:a0:
         d6:c8:21:79:41:de:10:31:52:4c:37:ea:62:44:30:3a:35:b9:
         0b:21:e6:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYpNnIkLVdfP5HfGWm4h1RHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NWFiODQyNjhjOTA0YzgyNWE0ZjA5ZWIwNDBkMWY3MmUx
MTIzMzEwHhcNMjMwODMxMjIwMDE4WhcNMjMwOTAxMjIwMDE4WjAzMTEwLwYDVQQD
EyhkYjYxYzQwNjVlODVmMzY1NmY3Y2Q1NTY3YTY0MWI4Mzk5Nzk0MjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZIxwoPD9cyiNLGeI4xR+vGMLyjF
LQ5IErLeUDPvIJJrYMl+v7Y+2W5gNenZFWJ1QVdU4QSDUiCfhFnpvV0ru76UFgLt
lH/2bk7k4ptwPH6CB7+Hnwn68YKq+6xLcnrmrMPtRZKb6RlwzTeTVNw0sles/jut
s9PvOzpO2AJPcVGgJEWj6e/ncr8sAG07W1s44iZ/5jwWINjkhgkv2zqxXMpEupWj
ZAIela9rmvUKhhs5YN3/rxrtuHZBNyX4uJbIYWxccLCiixFIDdhaQuEnJhfv2L6A
Okwy+pvr1RirG//9UlF1+gj463xgLPVt1uBAIJ2yPGCwNcjdargafanQ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNthxAZehfNlb3zVVnpkG4OZeUIxMB8GA1UdIwQY
MBaAFBlauEJoyQTIJaTwnrBA0fcuESMxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZxNFFtakpCTWdscFBDZXNFRFI5eTRSSXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zY2RjZGUtMmNmYi00NDMwLWJiZTUt
NDdhYmQ3NmVhNjcyLzEvR1ZxNFFtakpCTWdscFBDZXNFRFI5eTRSSXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zY2RjZGUtMmNmYi00NDMwLWJiZTUtNDdhYmQ3NmVhNjcy
LzEvR1ZxNFFtakpCTWdscFBDZXNFRFI5eTRSSXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiR7B/T8
Bbz/vphT33bi83bErgVw+W5SDnt2Nu5AbH97bdj7y2YUnmmjOv7muZJP6U4S6Ra0
MlLbE/MsC1yIVJheFXD9IcuAhNQT83imA7Jx6O9+M1K7GIgkgaNbdgnmUAW1Vjsh
MufZ9R8SYd8jfP9rx4cPEgyL/IEI7NXVjWzoy6pbHovrgOO/se1/RWTGvG+US55n
PvIeZ82xHmShBnyhFuGgWBvV/jRBOsaMYzKfEbzTc9aZIiVOQf/yp/E5LfJfMUy2
vBsZoIy2HWihDkmVARwh5T9dQMXHAGmD+I9rkscSM5q3ODeg1sgheUHeEDFSTDfq
YkQwOjW5CyHm2w==
-----END CERTIFICATE-----